Skip to content

Known vulnerabilities in n/a OrangeScrum

Is your version affected?

CVE Summary Score Published
CVE-2023-0738 OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application 6.1 Medium Apr 4, 2023
CVE-2023-0624 OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application 6.1 Medium Feb 9, 2023
CVE-2023-0454 OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server 8.1 High Feb 1, 2023
CVE-2023-0164 OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary commands on the server 8.8 High Jan 18, 2023

Other n/a products